Instead of using one or two specific time servers, why not use several rotating ones, which are unlikely to be all down at any given time? Even better, how about being able to set a pool of time servers on the same continent as your location?